ID RST:4261E722-E03A-3525-AB1C-D144830278D4 Type rst Reporter RST Threat Feed Modified 2019-09-30T00:00:00
Description
Found 190[.]108.228.48 in RST Threat Feed with score 3.
First seen: 2019-09-30T03:00:00, Last seen: 2021-01-21T03:00:00.
IOC tags: malware, c2, generic.
We found that the IOC is used by: emotet.
ASN 27751: (First IP 190.108.224.0, Last IP 190.108.255.255).
ASN Name "" and Organisation "Neunet SA".
ASN hosts 27 domains.
GEO IP information: City "Neuqun", Country "Argentina".
https://rstcloud.net/
{"id": "RST:4261E722-E03A-3525-AB1C-D144830278D4", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: 190.108.228.48", "description": "Found **190[.]108.228.48** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **3**.\n First seen: 2019-09-30T03:00:00, Last seen: 2021-01-21T03:00:00.\n IOC tags: **malware, c2, generic**.\nWe found that the IOC is used by: **emotet**.\nASN 27751: (First IP 190.108.224.0, Last IP 190.108.255.255).\nASN Name \"\" and Organisation \"Neunet SA\".\nASN hosts 27 domains.\nGEO IP information: City \"Neuqun\", Country \"Argentina\".\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2021-01-22T00:00:00", "modified": "2019-09-30T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2021-01-21T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "ip", "ip": ["190.108.228.48"], "domain": [], "url": [], "iocScore": {"ioc_frequency": 0.05, "ioc_src": 74.39, "ioc_tags": 0.89, "ioc_total": 3.0}, "tags": ["generic", "c2", "malware"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {"city": "Neuqun", "country": "Argentina", "region": "Neuquen"}, "asn": {"cloud": "", "domains": 27, "firstip": {"netv4": "190.108.224.0", "num": "3194806272"}, "isp": "", "lastip": {"netv4": "190.108.255.255", "num": "3194814463"}, "num": 27751, "org": "Neunet SA"}, "threat": ["emotet"]}